Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WPMNJwLYiOm-0XdVZMRUq0uPpFc.roa
File: WPMNJwLYiOm-0XdVZMRUq0uPpFc.roa (raw, json)
Hash identifier: n+U9jA/naJBCTtEY9noDpOj7zEF/r7C7fxM9h9vrpy0=
Subject key identifier: 58:F3:0D:27:02:D8:88:E9:BE:D1:77:55:64:C4:54:AB:4B:8F:A4:57
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191AC35A5AE83E6052CFA83EB18D6E5CDEE
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WPMNJwLYiOm-0XdVZMRUq0uPpFc.roa
Signing time: Sun 01 Sep 2024 06:11:22 +0000
ROA not before: Sun 01 Sep 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 01 Sep 2024 07:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ac:35:a5:ae:83:e6:05:2c:fa:83:eb:18:d6:e5:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Sep 1 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58f30d2702d888e9bed1775564c454ab4b8fa457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:ef:84:6f:ec:92:bd:4e:44:cd:bc:4a:e9:
1e:60:81:09:b0:43:24:45:7c:59:01:d8:6b:f9:04:
08:2d:ea:7b:21:ed:6f:76:2a:00:74:de:00:09:34:
32:9e:a7:6c:8a:f0:d2:c6:b0:dc:fb:a6:04:45:29:
9e:76:d7:de:91:01:fb:16:f2:d1:4c:9d:1f:87:f6:
58:38:8f:7f:a3:53:65:6a:df:52:fe:3f:d2:38:74:
25:b7:ec:10:92:4c:c7:fd:54:03:aa:79:f8:1c:ff:
55:dc:a8:96:c0:23:05:91:b1:de:f2:8e:4e:2b:74:
dd:02:5a:ae:1f:a0:2b:bf:c8:5c:1d:d4:6c:c7:9a:
cc:04:8e:1e:42:bd:1e:bf:10:5a:ac:41:a8:57:2b:
8e:e5:2d:4a:36:20:7c:62:06:73:f0:3a:fc:d7:2e:
0d:21:90:f1:68:2e:0d:47:48:1f:88:0f:8d:bd:d3:
dc:64:ca:c7:b0:04:9b:7d:06:54:61:d3:43:d9:7c:
7e:ed:6d:dc:e0:a2:b0:ec:22:b4:2b:42:ea:b9:c5:
0d:92:37:a7:1b:52:04:f8:3d:f6:ca:35:4e:56:3f:
f4:41:6a:46:63:8a:ea:b7:d9:a6:72:4c:a6:3d:bf:
ab:be:47:d0:c9:da:61:b8:f4:a8:ef:1e:9e:0a:23:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F3:0D:27:02:D8:88:E9:BE:D1:77:55:64:C4:54:AB:4B:8F:A4:57
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WPMNJwLYiOm-0XdVZMRUq0uPpFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
40:ad:a6:47:6a:95:d0:14:95:27:6e:47:35:5d:1f:11:79:85:
01:5a:c0:e1:61:77:26:aa:14:75:fd:e1:11:c9:1c:bf:c0:7f:
b5:f8:f1:cd:a0:08:27:dc:86:ee:77:09:23:e2:4c:65:9a:9d:
f2:6b:af:7e:65:4e:6a:39:c2:d5:54:f8:7e:6d:e4:42:23:7e:
ef:b6:02:f3:e0:c1:77:11:68:82:8b:19:bf:2b:fa:11:fb:82:
14:e2:84:7b:ba:89:06:2a:b2:7a:c9:db:fe:61:b5:40:af:9d:
15:60:96:78:1c:09:d0:d0:90:fc:70:6b:eb:22:b3:31:43:99:
72:13:71:f1:77:ec:0b:32:10:4b:d1:97:6b:a7:34:3a:12:e9:
84:c9:e0:e1:46:0f:cc:a2:e2:61:95:e8:5b:8d:43:d2:e3:6b:
c9:5a:24:1a:59:e5:f8:b1:26:5a:6c:5c:14:72:15:67:de:a9:
b7:75:ad:f7:48:57:b1:47:d9:5d:3c:ce:ba:40:5b:96:13:10:
4f:a6:9d:d7:48:c9:2d:bb:39:da:e2:61:45:fd:05:9b:96:88:
eb:ca:42:a0:fc:dc:76:38:20:b6:dc:b0:85:6d:47:5d:28:b0:
01:58:ec:bf:17:d0:17:42:3d:c5:d2:6b:ab:46:70:fd:59:4e:
e6:8c:d6:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:44 2025 by rpki-client